Overview
overview
3Static
static
31fd8ea-MenyooSP.zip
windows11-ltsc_2024-x64
1License.txt
windows11-ltsc_2024-x64
1Menyoo.dll
windows11-ltsc_2024-x64
1Readme.txt
windows11-ltsc_2024-x64
1menyooStuf...ta.xml
windows11-ltsc_2024-x64
1menyooStuf...me.txt
windows11-ltsc_2024-x64
1menyooStuf...ls.txt
windows11-ltsc_2024-x64
1menyooStuf...me.txt
windows11-ltsc_2024-x64
1menyooStuf...ce.png
windows11-ltsc_2024-x64
1menyooStuf...dh.png
windows11-ltsc_2024-x64
1menyooStuf...dm.png
windows11-ltsc_2024-x64
1menyooStuf...ce.png
windows11-ltsc_2024-x64
1menyooStuf...dh.png
windows11-ltsc_2024-x64
1menyooStuf...dm.png
windows11-ltsc_2024-x64
1menyooStuf...an.png
windows11-ltsc_2024-x64
1menyooStuf...n2.png
windows11-ltsc_2024-x64
1menyooStuf...en.png
windows11-ltsc_2024-x64
1menyooStuf...n2.png
windows11-ltsc_2024-x64
1menyooStuf...ge.png
windows11-ltsc_2024-x64
1menyooStuf...e2.png
windows11-ltsc_2024-x64
1menyooStuf...nk.png
windows11-ltsc_2024-x64
1menyooStuf...k2.png
windows11-ltsc_2024-x64
1menyooStuf...le.png
windows11-ltsc_2024-x64
1menyooStuf...e2.png
windows11-ltsc_2024-x64
1menyooStuf...ow.png
windows11-ltsc_2024-x64
1menyooStuf...w2.png
windows11-ltsc_2024-x64
1menyooStuf...ge.png
windows11-ltsc_2024-x64
1menyooStuf...ed.png
windows11-ltsc_2024-x64
1menyooStuf...ge.png
windows11-ltsc_2024-x64
1menyooStuf...ed.png
windows11-ltsc_2024-x64
1menyooStuf...me.txt
windows11-ltsc_2024-x64
1menyooStuf...ad.png
windows11-ltsc_2024-x64
1Analysis
- geolocation tags
nanew-jerseynorth-americaunited-statesususa - max time kernel
899s - max time network
463s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-de - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-delocale:de-deos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 14:33
Static task
static1
Behavioral task
behavioral1
Sample
1fd8ea-MenyooSP.zip
Resource
win11ltsc2024-20260710-de
Behavioral task
behavioral2
Sample
License.txt
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral3
Sample
Menyoo.dll
Resource
win11ltsc2024-20260710-de
Behavioral task
behavioral4
Sample
Readme.txt
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral5
Sample
menyooStuff/AnimalRidingData.xml
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral6
Sample
menyooStuff/Audio/Audio.readme.txt
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral7
Sample
menyooStuff/CutsceneLabels.txt
Resource
win11ltsc2024-20260710-de
Behavioral task
behavioral8
Sample
menyooStuff/Graphics/Clock/Clock.readme.txt
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral9
Sample
menyooStuff/Graphics/Clock/Default_face.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral10
Sample
menyooStuff/Graphics/Clock/Default_handh.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral11
Sample
menyooStuff/Graphics/Clock/Default_handm.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral12
Sample
menyooStuff/Graphics/Clock/Frameless_face.png
Resource
win11ltsc2024-20260710-de
Behavioral task
behavioral13
Sample
menyooStuff/Graphics/Clock/Frameless_handh.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral14
Sample
menyooStuff/Graphics/Clock/Frameless_handm.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral15
Sample
menyooStuff/Graphics/Speedo/bg_cyan.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral16
Sample
menyooStuff/Graphics/Speedo/bg_cyan2.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral17
Sample
menyooStuff/Graphics/Speedo/bg_green.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral18
Sample
menyooStuff/Graphics/Speedo/bg_green2.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral19
Sample
menyooStuff/Graphics/Speedo/bg_orange.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral20
Sample
menyooStuff/Graphics/Speedo/bg_orange2.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral21
Sample
menyooStuff/Graphics/Speedo/bg_pink.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral22
Sample
menyooStuff/Graphics/Speedo/bg_pink2.png
Resource
win11ltsc2024-20260710-de
Behavioral task
behavioral23
Sample
menyooStuff/Graphics/Speedo/bg_purple.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral24
Sample
menyooStuff/Graphics/Speedo/bg_purple2.png
Resource
win11ltsc2024-20260710-de
Behavioral task
behavioral25
Sample
menyooStuff/Graphics/Speedo/bg_yellow.png
Resource
win11ltsc2024-20260710-de
Behavioral task
behavioral26
Sample
menyooStuff/Graphics/Speedo/bg_yellow2.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral27
Sample
menyooStuff/Graphics/Speedo/needle_orange.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral28
Sample
menyooStuff/Graphics/Speedo/needle_red.png
Resource
win11ltsc2024-20260710-de
Behavioral task
behavioral29
Sample
menyooStuff/Graphics/Speedo/night_needle_orange.png
Resource
win11ltsc2024-20260710-de
Behavioral task
behavioral30
Sample
menyooStuff/Graphics/Speedo/night_needle_red.png
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral31
Sample
menyooStuff/Graphics/Vehicle Previews/Vehicle Previews.readme.txt
Resource
win11ltsc2024-20260709-de
Behavioral task
behavioral32
Sample
menyooStuff/Graphics/teleportToWaypointBoxGamepad.png
Resource
win11ltsc2024-20260709-de
General
- Target License.txt
- Size 711B
- Sample260720-rwynfafs8t
- SHA256 e9a693ed6e331b0fea3e50377b7e5fc05ec0aa2b649b65ee825afe412a008bd7
- MD5 9f196d9446642fc36a3c8fbf30419ffd
- SHA1 724ba8c03fad3ccd75340342cefbe6011da02a98
- SHA512 de460f9edfbb2889c1e42b4503560552763f938d9f98d35e0eb441842dc90da3b57d16cd2efb7a5ad9899fe180665d3360c7c53b53513da3a751e566fcdf393e
- TLSH T17B01DC0E6466CBBA8C4013C53943D0DFF22B9AD376DE04A0250A934FC50AA7618E24E8
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Opens file in notepad (likely ransom note) 1 IoCs
pid Process 3208 NOTEPAD.EXE
Processes
-
C:\Windows\system32\NOTEPAD.EXEC:\Windows\system32\NOTEPAD.EXE C:\Users\Admin\AppData\Local\Temp\License.txt1⤵
- Opens file in notepad (likely ransom note)
PID:3208
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k GPSvcGroup1⤵PID:3624
-
C:\Windows\System32\SecurityHealthHost.exe\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding1⤵PID:4428